Privacy Policy
Effective date: 8 October 2026
Prasadam is an Android app for booking a plate of prasadam at the Nalanda Complex, IIT Kharagpur, before the day's cutoff and collecting it at the counter with a QR code. It is run by MahaPrasadam ("we"). Questions about this policy go to adarshkmeher@gmail.com.
What we collect
From your Google account, when you sign in. Your email address and your name. We do not see your Google password, and we do not read your contacts, mail, calendar or files.
From the institute student list, if you are on it. If you sign in with an institute address that appears on the student list given to us, we copy your roll number and name from that list onto your account. You never type a roll number into the app. Other accounts have no roll number.
From your bookings. The day you booked for, the dishes and the number of plates, whether the booking was paid, cancelled or collected, and the time each of those happened.
From your payments. Payments are taken by Razorpay. We never see or store your card number, UPI PIN or bank login. We keep the amount, the Razorpay order and payment ids, the payment status and the confirmation Razorpay sends us, which can include the phone number or email address you gave Razorpay at checkout. If a day is called off and we refund you, we keep a record of that refund.
On your phone. The app keeps you signed in and remembers a few display settings. It asks for no Android permission other than internet access.
What we do not collect
Location, contacts, photographs, microphone or camera input, advertising ids, or analytics about how you use the app. The app shows no advertisements and contains no advertising or analytics software.
How we use it
- To recognise you and let you book.
- To tell the kitchen how many plates of each dish to cook.
- To let the volunteer at the counter confirm your booking and hand you your plate.
- To take payment and to refund you if a day is called off.
- To count, in total, how many plates were booked and collected each day.
We do not sell your information and we do not use it for advertising.
Who sees it
- Counter volunteers. On a serving day the volunteer's phone holds that day's list: your name, your roll number if you have one, your plates and your booking code. It does not hold your email address. The list is deleted from that phone after serving ends.
- Google, to sign you in.
- Razorpay, to take and refund payments. Razorpay handles your payment details under its own privacy policy.
- Supabase, which hosts our database in Mumbai, India.
- The kitchen receives plate counts only, with no names.
We share nothing with anyone else unless the law requires it.
How long we keep it
| What | How long |
|---|---|
| Bookings | 180 days after the serving day, then deleted automatically |
| Counter collection records | 90 days after the serving day, then deleted automatically |
| The day's list on the volunteer's phone | Until serving ends that day |
| Your account (email, name, roll number) | Until you ask us to delete it |
| Payment and refund records | Kept as financial records after the booking is deleted |
| Daily totals with no names | Kept indefinitely |
Your choices
You can ask us to delete your account and the data tied to it at any time. The steps are on the account deletion page: https://www.mahaprasadam.in/account-deletion. You can also ask us for a copy of what we hold about you, or to correct it, by writing to adarshkmeher@gmail.com.
Security
Data travels between the app and our servers over an encrypted connection. Each signed-in person can read only their own account and bookings. The institute student list cannot be read by any app user.
Children
The app is meant for students, staff and visitors of the institute. It is not directed at children under 13.
Changes
If this policy changes we will update this page and its effective date.
Contact
Adarsh Kumar Meher
adarshkmeher@gmail.com